Associate Director - Legal, Compliance & WREF Domain Architect

About the Team:

Enterprise Systems is the backbone of GSK’s internal operations in Digital & Tech, enabling GSK Global Functions teams such as Finance, Procurement, HR, Legal, Compliance, WREF, CGA and Corporate Secretariat to run seamlessly. This team designs and delivers cutting-edge digital platforms that power critical processes, ensuring efficiency, compliance, and scalability across the enterprise.    

 

Legal, Compliance & WREF Digital & Tech delivers digital solutions that support Legal & Compliance and Workplace Real Estate & Facilities (WREF). This team drives product roadmaps and manages platforms that safeguard GSK’s integrity and reputation globally. By joining this team, you’ll help shape systems that support thousands of employees worldwide, driving innovation and reliability in the tools that keep GSK moving forward. 

Job Purpose:

The Legal, Compliance + WREF Architect is responsible for designing, governing, and maintaining data architecture across Legal, Compliance and Workplace Real Estate & Facilities (WREF) domains, ensuring that data models, data flows, and integrations follow enterprise data and architecture standards while supporting Legal, Compliance & WREF-specific business needs. The role ensures data is structured, secure, and interoperable across products within Legal, Compliance & WREF, evaluating upstream and downstream impacts of solution changes, and guiding delivery teams on best practice. The Legal, Compliance + WREF Architect aligns domain data platforms and data products to enterprise principles, enabling trusted, scalable, and well-engineered data solutions that support analytics, operational processes, and decision-making within the domain. The role is accountable for some critical data products in Legal & Compliance aligned to Compliance Risk Analytics and Corporate Investigations.

This role operates under GSK's "Performance with Choice" hybrid working approach, typically expecting 2–3 days per week in the office, with the specific pattern agreed between the successful candidate and their manager based on role and team needs.

Key Responsibilities:

• Define and maintain data architecture for the Legal, Compliance & WREF Domain, including domain-specific data models, lineage, data flows, data contracts/APIs, and integration patterns across cloud and on-premise platforms.
• Assess the architectural impact of new data sources, changes, and integrations within the Legal, Compliance & WREF domain, setting functional data architecture that aligns to enterprise standards and governance guidance.
• Provide technical leadership for complex domain data designs, ensuring solutions are scalable, secure-by-design (e.g., privacy threat modelling, DLP, encryption policies), interoperable, and optimised for business value.
• Ensures core Legal & Compliance data products such as Compliance Risk Analytics & Monitoring (CRAM) and data services provided for corporate investigations are modern, robust and AI ready. This includes supporting business stakeholders to increase the scope of these data platforms through new integrations/data sources
• Ensures L&C&W data products are architected and engineered in the most cost effective way utilising enterprise hosting/cloud services.
• Develop and maintain domain architecture artefacts, including conceptual, logical, and physical data models, lineage completeness, metadata definitions, reference architectures, and versioned API/data contracts for interoperability.
• Partner with Data Product teams, Business Data Owners, Enterprise D&A, and Analytics teams to shape domain use cases, clarify data requirements, and support enterprise-level use cases where applicable.
• Provide architectural guidance on the selection, configuration, and implementation of data platforms and technologies within the domain (e.g., Azure Data Services, integration tooling, MDM/metadata stacks), ensuring alignment with enterprise technical direction.
• Support the implementation and adoption of master data and metadata frameworks within the Legal, Compliance & WREF domain, contributing to standardised definitions, stewardship, and enterprise practice alignment.
• Define integration and data experience outcomes that support digital ecosystems, ensuring usable, reusable, and well-documented data interfaces across Products and Platforms.
• Act as a technical advisor on domain data issues, including data quality SLAs, timeliness, reuse index, security constraints, and architectural design choices, supporting delivery teams to resolve challenges.
• Ensure compliance with information security, data protection, and regulatory standards across all domain data designs, integrations, and contracts through security-by-design checkpoints.
• Lead your team in using approved AI tools to improve productivity and ways of working, role-modelling responsible use and follow GSK’s Responsible AI, privacy and security requirements.

Responsibilities:

• 15 to 19 years’ professional experience with Bachelor's or Master's degree in a relevant field (e.g., Computer Science, Information Technology, or Engineering), or equivalent experience
• Industry certifications highly desirable (e.g., TOGAF, CDMP, Azure Solutions Architect, Data Management certifications)
• Typically, 8–10 years’ experience in data architecture, data engineering, or enterprise information architecture roles within complex environments
• Experience designing data models, flows, interfaces, and integration patterns within a specific functional or product domain (experience of data architecture in Legal, Compliance & Real Estate/Facilities functions). Evidence of applying enterprise data standards, rather than owning or defining them.
• Hands-on experience with cloud and on-premise data platforms, data lakes, and integration technologies.
• Experience collaborating with product and engineering teams to embed data architecture in delivery.
• Understanding of information security, privacy regulations, and data quality requirements.
  

Preferred Skills:

• Strong analytical and conceptual modelling skills.
• Deep understanding of data governance, lineage, and metadata management.
• Ability to translate complex business requirements into architectural designs.
• Familiarity with integration technologies and best practices.
• Excellent communication and documentation skills to support cross-functional delivery teams.
• Strong understanding of security, data protection, and regulatory requirements.

Skills

Data Architecture Development, Data Engineering, General Data Protection Regulation (GDPR), Information Architectures, Legal Technology, Master Data Management (MDM), Metadata, Microsoft Azure, Real Estate

 

 

Why GSK?

Uniting science, technology and talent to get ahead of disease together.

GSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases – to impact health at scale.

People and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.

Inclusion at GSK:

As an employer committed to Inclusion, we encourage you to reach out if you need any adjustments during the recruitment process.

Please contact our Recruitment Team at IN.recruitment-adjustments@gsk.com to discuss your needs.

Important notice to Employment businesses/ Agencies

GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.

It has come to our attention that the names of GlaxoSmithKline or GSK or our group companies are being used in connection with bogus job advertisements or through unsolicited emails asking candidates to make some payments for recruitment opportunities and interview. Please be advised that such advertisements and emails are not connected with the GlaxoSmithKline group in any way.

GlaxoSmithKline does not charge any fee whatsoever for recruitment process. Please do not make payments to any individuals / entities in connection with recruitment with any GlaxoSmithKline (or GSK) group company at any worldwide location. Even if they claim that the money is refundable.

If you come across unsolicited email from email addresses not ending in gsk.com or job advertisements which state that you should contact an email address that does not end in “gsk.com”, you should disregard the same and inform us by emailing askus@gsk.com, so that we can confirm to you if the job is genuine.